Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-06-17Merge branch 'rs-devise-emails' into 'master' Robert Speicher
Customize all Devise mails Continuing from https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3354 See merge request !4297
2016-06-09Merge branch 'rs-fix-ldap-2fa-login' into 'master' Robert Speicher
Fix 2FA-based login for LDAP users The OTP input form is shared by both LDAP and standard logins, but when coming from an LDAP-based form, the form parameters aren't nested in a Hash based on the `resource_name` value. Now we check for a nested `remember_me` parameter and use that if it exists, or fall back to the non-nested parameters if it doesn't. Somewhat confusingly, the OTP input form _does_ nest parameters under the `resource_name`, regardless of what type of login we're coming from, so that allows everything else to work as normal. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/18185 See merge request !4493
2016-06-08Merge branch '14098-customize-after-sign-up-path' into 'master' Robert Speicher
Allow custom text on 'almost there' page Add a new application setting, after_sign_up_text. This is text to be rendered as Markdown and shown on the 'almost there' page after a user signs up, but before they've confirmed their account. Closes #14098. See merge request !4098
2016-06-08Merge branch 'password-min-length-placeholder' into 'master' Robert Speicher
Added minimum password length to password field Add a placeholder to the password field in the register form with the minimum number of characters required. Also added a pattern to the field to stop it submitting if less than that. Closes #17765 See merge request !4458
2016-06-08Allow custom text on 'almost there' pageSean McGivern
Add a new application setting, after_sign_up_text. This is text to be rendered as Markdown and shown on the 'almost there' page after a user signs up, but before they've confirmed their account. Tweak the styles for that page so that centered lists look reasonable.
2016-06-08Fix 2FA-based login for LDAP usersRobert Speicher
The OTP input form is shared by both LDAP and standard logins, but when coming from an LDAP-based form, the form parameters aren't nested in a Hash based on the `resource_name` value. Now we check for a nested `remember_me` parameter and use that if it exists, or fall back to the non-nested parameters if it doesn't. Somewhat confusingly, the OTP input form _does_ nest parameters under the `resource_name`, regardless of what type of login we're coming from, so that allows everything else to work as normal.
2016-06-06Implement authentication (login) using a U2F device.Timothy Andrew
- Move the `authenticate_with_two_factor` method from `ApplicationController` to the `AuthenticatesWithTwoFactor` module, where it should be.
2016-06-03Added minimum password length to password fieldPhil Hughes
Closes #17765
2016-06-01Disable 2FA field autocomplete, resolves #18021.Connor Shea
2016-05-31Pass the "Remember me" value to the 2FA token formRobert Speicher
Prior, if a user had 2FA enabled and checked the "Remember me" field, the setting was ignored because the OTP input was on a new form and the value was never passed. Closes #18000
2016-05-25New confirmation email :fire:Robert Speicher
2016-05-25Make the standard Devise confirmation email our new plaintext versionRobert Speicher
2016-05-12show only the eanbled oauth providersAndrei Gliga
2016-05-12render the omniauth_box if there are any button_based_providersAndrei Gliga
2016-05-04Merge branch 'rs-unique-signup-fields' into 'master' Douwe Maan
Improve uniqueness of field names on the signup form Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075 See merge request !3826
2016-05-03Improve the Two-factor Authentication sign-in text [ci skip]connorshea
Resolves #14543.
2016-04-22Improved confirmation UXPhil Hughes
Closes #4228
2016-04-19Improve uniqueness of field names on the signup formRobert Speicher
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075
2016-04-13Don't retrieve default values from `params`Timothy Andrew
- In the signup page.
2016-04-13Don't populate the password field on signup validation errors.Timothy Andrew
- Previously, we were pulling `params[:user][:password] as the default value for the password field. This is incorrect; we should be pulling it from `@user.password` or the like.
2016-03-20change the css class has_tooltip to has-tooltip universallyArinde Eniola
2016-02-25Move "I should see Crowd login form" feature to a view specRobert Speicher
We were doing all kinds of code gymnastics to "enable" Crowd in the feature spec and this would sometimes cause a transient failure. Really what it's testing is if the Crowd login form shows when Crowd's enabled, so this is much better suited to a view spec.
2016-02-23Show Crowd login even when sign-in is disabledPeter Hudec
2016-01-13Replace nav-tabs with nav-linksDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2015-12-28reCAPTCHA is configurable through Admin Settings, no reload needed.Gabriel Mazetto
2015-12-28Make sign-up form retain fields after failed CAPTCHA testStan Hu
2015-12-27Add support for Google reCAPTCHA in user registration to prevent spammersStan Hu
2015-12-15Allow account unlock via emailDrew Blessing
2015-11-16Revert "Merge pull request #9812 from chrspeich/hide-tabs-lone-auth-provider"Robert Speicher
This reverts commit 84999611d8f7894219eb4ebc76555c79b1f14794, reversing changes made to 0d9fb211f3f842d10e1c57dcb9d3d42a9c11cd0b.
2015-11-07Hide tab-bar in login-box when only one tabs is shown.Christian Speich
2015-09-30Autofocus the email field on the password reset formRobert Speicher
2015-09-02Crowd integrationValery Sizov
2015-07-29Added tags to disable autocapitalize and autocorrect on login fieldDaryl Chan
- Updated CHANGELOG
2015-07-23Allow custom label to be set for authentication providers.Douwe Maan
2015-06-05Add "Remember me" checkbox to LDAP signin form.Douwe Maan
2015-05-16Fill in email on the new password formVinnie Okada
2015-05-14Merge branch 'omniauth-csrf' into 'master'Dmitriy Zaporozhets
Protect OmniAuth request phase against CSRF. Addresses #2268. See merge request !1793
2015-05-10Move "invalid 2FA code" error message to the flashRobert Speicher
This makes it consistent with the Invalid email/password error message from the previous step.
2015-05-10Add a hint on login form about using a recovery codeRobert Speicher
2015-05-10Refactor SessionsControllerRobert Speicher
Also adds test case for providing an invalid 2FA code and then a valid one without re-entering username and password.
2015-05-10Update login views for two-factor authRobert Speicher
2015-05-10Be consistent with what we call the 2FA featureRobert Speicher
"Two-factor" vs. "2-Factor"
2015-05-10Turn 2-factor authentication into 2 steps process. Disabled 2fa UI for ldap ↵Dmitriy Zaporozhets
users since it is not supported
2015-05-10Init 2 factor authentication for user modelDmitriy Zaporozhets
2015-04-30Add a page title to every page.Douwe Maan
2015-04-24Protect OmniAuth request phase against CSRF.Douwe Maan
2015-04-23Merge pull request #9062 from fgimian/omniauth-disable-turbolinkDmitriy Zaporozhets
Disable turbolinks for omniauth link to avoid rendering problems
2015-04-08Improve wording below signup boxRobert Speicher
[ci skip]
2015-03-31Disable turbolinks for omniauth link to avoid rendering problemsFotis Gimian
2015-03-23Update views to single form of address. Change "my" to "your"Dmitriy Zaporozhets